It doesn’t even have to be only for known devices. Once you’ve compromised one device, you can just phone home to have a full powered LLM do your work.

The only real use cases for this would be on closed networks with no internet access, or networks where the traffic is closely monitored. Like, yeah, if I’m trying to hack the CIA, maybe I consider something like this. For the vast majority of devices and networks, this is inefficient and unnecessary.

I mean, it is kind of cool. But vanishingly few organizations have tight enough security that this is worth doing.

I think people are right that the solution here isn’t to try a different project.

Instead of being confrontational about it, though, I’d recommend a different aproach.

evelyn: .lol 😜

you: I know! I know. The branding is pretty silly. But this really is the right tool for the task. Unesco and Wikimedia use it. And we can do our own branding for $50/month. 🤷

A lot can be fixed by just acknowledging people. They’re trying to evaluate something they don’t understand, and having a reaction. It’s not even unreasonable. The right thing to do is just acknowledge and move on.

Usually that’s all it takes. Don’t let yourself be embarrassed when you’re being reasonable. If they won’t move on, that’s the point where I start thinking about job applications somewhere else.

Doesn’t mean they’re wrong!

I’ll just upvote the both of you. We all need to be more aware of our echo chambers.

I think most the serious investors know. But, in a bubble, stock value can keep going up long past the point that makes sense. If you think that’s going to happen, it can make sense to invest even if you think it’s a losing play in the long run.

This should really make the timing more urgent for Anthropic. I was legitimately surprised when they decided to delay the IPO.

Also there’s still a real chance that Anthropic has some real value proposition that I’m not understanding, though I’ve yet to find someone who can make a coherent argument for what that looks like.

Right? This is going to be an interesting story to follow.

On the one hand, they don’t want to IPO right now, probably because they don’t think investors are keen to buy at the price they’re asking.

On the other hand, I don’t really see things getting better for them as long as cheap open-weight models that are almost as good as Anthropic’s exist. As more people figure this out, I think it’s going to get worse not better. So I don’t think they can afford to wait long.

I think it’s important to call out that this isn’t an issue with AI being brilliant at hacking. It’s that these systems are basically totally unsecured, and the main protection is that no one with the technical skill is bothering to try to get access.

This isn’t to say this isn’t a serious problem. We’re moving from a world where you need a trained security expert to spend non-trivial time to get access to these systems to one where anyone with access to an un-restricted agentic LLM can do this trivially and quickly.

As a civilization, we need to start taking security seriously.

Retractions do happen regularly. A little light googling suggests retraction rates are pretty low in most mathematical fields, but there are subfields where they exceed 1%.

I don’t know if the <0.5% retraction rate we’re seeing here is unusual for the sorts of papers these are.

And that’s kind of my point. I read the article and I still have no idea. I doubt the author of the article knows either. Which makes me think that they had an agenda going into the whole affair.

There are definitely issues with what OpenAI is doing. I’m the last to defend them.

That said, a small correction rate after uploading a bunch of preprints just doesn’t seem like news. An article that headlines with that, but doesn’t even bother to tell us what the normal rate of corrections and withdrawals is for humans really feels like propaganda to me.

I would really like to live in a world where we don’t reward this sort of “journalism” with attention.

Honestly, this is nothing new.

Listening to ChatGPT is a solid improvement over listening to Tucker Carlson.

Don’t get me wrong, it’s not good! I don’t exactly trust the Sam Altmans of the world. But this is the same circus, different clowns.

this is all done with custom models by individuals.

This is really important for people to understand.

Powerful open weight models are already out there. Anyone can download them and run them. There is no possibility for government control of AI content without North Korean style internet controls.

Politicians and corporations will absolutely start trying to push for more controls. They will tell you to “think of the children” and they will use this to take power for themselves, knowing full-well that they can’t actually meaningfully prevent this from happening. We need people to understand that the push for control here has nothing to do with morality or protecting anyone.